Nested quantum search and NP-complete problems 
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A quantum algorithm is known that solves an unstructured search problem in a number of it- 
erations of order \/d, where d is the dimension of the search space, whereas any classical algorithm 
necessarily scales as 0{d). It is shown here that an improved quantum search algorithm can be 
devised that exploits the structure of a tree search problem by nesting this standard search algo- 
rithm. The number of iterations required to find the solution of an average instance of a constraint 
satisfaction problem scales as VdF, with a constant a < 1 depending on the nesting depth and the 
. problem considered. When applying a single nesting level to a problem with constraints of size 2 

such as the graph coloring problem, this constant a is estimated to be around 0.62 for average 
instances of maximum difficulty. This corresponds to a square-root speedup over a classical nested 
search algorithm, of which our presented algorithm is the quantum counterpart. 
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, Over the past decade there has been steady progress in the development of quantum algorithms. Most attention 
has focused on the quantum algorithms for finding the factors of a composite integer and for finding an item in 
|, an unsorted database |^,^ . These successes have inspired several researchers to look for quantum algorithms that can 
■ solve other challenging problems, such as decision problems or combinatorial search problems more efhciently 
' than their classical counterparts. 

The class of NP-complete problems includes the most common computational problems encountered in practice . 
In particular, it includes scheduling, planning, combinatorial optimization, theorem proving, propositional satisfiability 
(~| ' and graph coloring. In addition to their ubiquity, NP-complete problems share a fortuitous kinship: any NP-complete 
' problem can be mapped into any other NP-complete problem using only polynomial resources 0|. Thus, any quan- 
tum algorithm that speeds up the solution of one NP-complete problem immediately leads to equally fast quantum 
algorithms for all NP-complete problems (up to the polynomial cost of translation). Unfortunately, NP-complete 
problems appear to be even harder than the integer factorization problem. Whereas, classically, the best known 
algorithm for the latter problem scales only sub-exponentially NP-complete problems are widely believed to be 
exponential Thus, the demonstration that Shor's quantum algorithm can factor an integer in a time that is 
5^ ' bounded by a polynomial in the "size" of the integer (i.e., the number of bits needed to represent that integer), while 
remarkable, does not lead to a polynomial-time quantum algorithm for NP-complete problems, the existence of which 
being considered as highly improbable Moreover, it has proven to be very difficult to adapt Shor's algorithm to 
other computational applications. 

By contrast, the unstructured quantum search algorithm |^,^ can be adapted quite readily to the service of solving 
NP-complete problems. As a candidate solution to an NP-complete problem can be tested for correctness in polynomial 
time, one simply has to create a "database" consisting of all possible candidate solutions and apply the unstructured 
quantum search algorithm. Unfortunately, the speedup afforded by this algorithm is only 0{^/N) where N is the 
number of candidate solutions to be tested. For a typical NP-complete problem in which one has to find an assignment 
of one of b values to each of fi variables, the number of candidate solutions, 6^, grows exponentially with fi. A classical 
algorithm would therefore take a time 0{b^) to find the solution whereas the unstructured quantum search algorithm 
would take Oib^^^^). Although this is an impressive speedup, one would still like to do better. 

While there is now good evidence that for unstructured problems, the quantum search algorithm is optimal [p| prf , 
these results have raised the question of whether faster quantum search algorithms might be found for problems that 
possess structure |6|,|l^~|l^ . It so happens that NP-complete problems have such structure in the sense that one can 
often build up complete solutions (i.e., value assignments for all the variables) by extending partial solutions (i.e., value 
assignments for a subset of the variables). Thus, rather than performing an unstructured quantum search amongst all 
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the candidate solutions, in an NP-complete problem, we can perform a quantum search amongst the partial solutions 
in order to narrow the subsequent quantum search amongst their descendants. This is the approach presented in this 
paper and which allows us to find a solution to an NP-complete problem in a time that grows, on average, as 0(6"'^/^) 
for the hardest problems, where a < 1 is a constant depending on the problem instance considered. 

Our improved quantum search algorithm works by nesting one quantum search within another. Specifically, by 
performing a quantum search at a carefully selected level in the tree of partial solutions, we can narrow the effective 
quantum search amongst the candidate solutions so that the net computational cost is minimized. The resulting 
algorithm is the quantum counterpart of a classical nested search algorithm which scales as 0{b'^^), giving a square 
root speedup overall. The nested search procedure mentioned here corresponds to a single level of (classical or 
quantum) nesting, but it can be extended easily to several nesting levels. Thus, our result suggests a systematic 
technique for translating a nested classical search algorithm into a quantum one, giving rise a square-root speedup, 
which can be useful to accelerate efficient classical algorithms (rather than a simple exhaustive search, of no practical 
use). We believe this technique is applicable in all structured quantum searches. 

The outline of the paper is as follows. Section || introduces a simple classical tree search algorithm that exploits 
problem structure to localize the search for solutions amongst the candidates. This is not intended to be a sophisticated 
classical tree search algorithm, but rather is aimed at providing a baseline against which our quantum algorithm can be 



compared. In Section 111 , we outline the standard unstructured quantum search algorithm ||3|,y . We focus especially 
on the algorithm based on an arbitrary unitary search operator , as this is a key for implementing quantum nesting. 



Finally, Section IV describes the quantum tree search algorithm based on nesting, which is a direct quantum analog 
of the classical search algorithm appearing in Section ||. The quantum search algorithm with several levels of nesting 
is also briefly discussed. We conclude by showing that the expected time to find a solution grows as 
is, as the square root of the classical time for problem instances in the hard region. The constant a, depending on 
the problem considered, is shown to decrease with an increasing nesting depth (i.e., an increasing number of nesting 
levels) . 

II. NESTED CLASSICAL SEARCH ON STRUCTURED PROBLEMS 
A. Structured search in trees 

Many hard computational problems, such as propositional satisfiability, graph coloring, scheduling, planning, and 
combinatorial optimization, can be regarded as examples of so-called "constraint satisfaction problems" . Constraint 
satisfaction problems consist of a set of variables, each having a finite set of domain values, together with a set of logical 
relations (or "constraints" ) amongst the variables that are required to hold simultaneously. A solution is defined by a 
complete set of variable/ value assignments such that every variable has some value, no variable is assigned confiicting 
values, and all the constraints are satisfied. 

In such constraint satisfaction problems, there is often a degree of commonality between different non-solutions. 
One typically finds, for example, that certain combinations of assignments of values to a subset of the variables are 
inconsistent (i.e., violate one or more of the constraints) and cannot, therefore, participate in any solution. These 
commonalities (several non-solutions sharing the same ancestor that is inconsistent) can be exploited to focus the 
search for a solution. Thus, a classical structured search algorithm can find a solution to a constraint satisfaction 
problem in fewer steps than that required by a unstructured search by avoiding regions of the search space that 
can be guaranteed to be devoid of solutions. Before investigating whether the problem structure can be exploited 



in a quantum search (see Sec. IV), we need to understand the circumstances under which knowledge of problem 
structure has the potential to be useful, classically. The key idea is that one can obtain complete solutions to a 
constraint satisfaction problem by systematically extending partial solutions, i.e. variable/value assignments that 
apply only to a subset of the variables in the problem. Not all partial solutions are equally desirable however. A 
partial solution is "good" if it is consistent with all the constraints against which it may be tested. Conversely a 
partial solution is "nogood" if it violates one or more such constraints. Sophisticated search algorithms work by 
incrementally extending good partial solutions and systematically terminating nogood partial solutions. This induces 
a natural tree-like structure on the search space of partial solutions. 
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FIG. 1. Constraint satisfaction problem in which we must find an assignment to the fi variables xi,X2, ■ • ■ 3;^. As an example, 
we picture the graph coloring problem, in which we have to assign one of b possible colors to each node of a graph so that every 
pair of nodes that are connected directly have different colors. The corresponding search tree is characterized by a depth fi 
and a branching ratio b. By looking at partial solutions at level i in the tree (the search space being of size 6') and considering 
only the descendants at level fi of these partial solutions, one avoids having to search through the entire space at the bottom 
of the tree (of size b'^). 



(b' states) 




(b^ states) 

To give a concrete example of a tree search problem, we consider the graph coloring problem as pictured in Fig. 
We have a graph that consists of ^ nodes connected by e edges, with < e < fi{fi — l)/2. Each node must be assigned 
a color (out of b possible colors) , so that any two nodes connected by an edge have different colors. More generally. 



for a constraint satisfaction problem, we are given a set of /x variables {xi, 



i) to which we must assign a value 



out of b possible values. This assignment must satisfy simultaneously a set of constraints, each involving k variables. 
The resulting number of nogood ground instances (roughly proportional to the number of constraints) is denoted by 
^. In the particular case of the graph coloring problem, the size of the constraints fc = 2 since each edge imposes a 
constraint on the colors assigned to the pair of nodes it connects. The number of nogood ground instances ^ = eb 
because each edge contributes exactly b nogoods and there are a total of e edges (for each edge, b pairs of identical 
colors are forbidden). 

The search tree corresponding to this constraint satisfaction problem is also shown in Fig. ^ The z-th level of the 
search tree enumerates all possible partial solutions involving a specific subset of i, out of the total /i, variables. The 
branching ratio in this tree, i.e. the number of children per node, is equal to 5, the number of domain values of a 
variable. For a hard instance of the problem, the number of steps required to find a good assignment at the bottom of 
the tree (or decide that there is no possible assignment satisfying all the constraints) scales as b^, i.e., of the order of 
the entire space of candidate solutions must be explored. Remarkably, many of the properties of search trees can be 
understood without precise knowledge of the constraints. Specifically, it has been found empirically that the difficulty 
of solving a particular instance of a constraint satisfaction problem can be approximately specified by four parameters: 
the number of variables, fi, the number of values per variable, b, the number of variables per constraint, fc, and the 
total number of assignments of the individual constraints that are nog ood, $ (l6|-[l8|. 

Clearly, if ^ is small, there are generally many solutions satisfying the few constraints, so that the problem is easy 
to solve. Conversely, if ^ is large, the problem is in general overconstrained, and it is easy to find that it admits no 
solution. The problem is maximally hard in an intermediate range of values for ^. In an effort to understand the 
observed variation in difficulty across different instances of NP-complete problems for fixed and 6, it has been shown 
that the cost of finding a solution (or proving none exists) depends essentially on the parameter 



P = ^/l^, 



(1) 



which characterizes the average number of constraints per variable [116 19 20f|. Specifically, the problem solving dif 



ficulty exhibits a ubiquitous easy-hard-easy pattern, with the most difficult problem instances clustered around a 
critical value of (3 given, approximately, by 

/3, = 5'=log(6) (2) 

assuming 6'^ 3> 1 for simplicity. This phenomenon, akin to a phase transition in physical systems |p^ , po| , persists 
across many different sophisticated algorithms. The average case complexity for a fixed /3 is therefore believed to be 
a more informative measure of computational complexity than either worst case or average case complexity.]^ It is 



^The motivation for investigating the complexity of NP-complete problems in term of j3 is that worst case analyses can be 
misleading because they tend to focus on atypical problem instances. Similarly, average case analyses can be misleading because 
they are sensitive to the choice of the ensemble of problem instances over which the average is computed. Such an ensemble 
may contain for example an exceedingly large number of easy instances. 
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the measure that we will use in the rest of this paper for estimating the scaling of the complexity of our improved 
quantum search algorithm (as well as the corresponding classical search algorithm). 



B. Average computational complexity of a classical algorithm 



Let us describe a simple classical algorithm for a tree search problem that exploits the structure of the problem 
by use of nesting. As pictured in Fig. |l|, the key idea is to perform a preliminary search through a space of partial 
solutions in order to avoid a search through the entire space at the bottom of the tree. By definition, a partial solution 
at level i in the tree assigns values to a subset of i so-called primary variables {xi, ■ ■■ ,Xi), which we denote as A. 
The subset of secondary variables (xi+i, ■ ■ ■ ,Xfj.), denoted as B, corresponds to the variables to which we assign a 
value only when extending the partial solutions (i.e., when considering the descendants of the partial solutions). In 
general, any partial solution can be tested against a part of the constraints, namely just those constraints involving 
the primary variables A. A partial solution that satisfies all these (testable) constraints can be viewed as a could-be 
solution in the sense that all solutions at the bottom of the tree (at level jj) must be descendants of could-be's. A 
classical search can be speeded up by terminating search along paths that are not descendants of a could-be, thereby 
avoiding to search through the entire space. The following algorithm can be used: 

• Find a could-be solution at level i in the tree. For this purpose, choose repeatedly a random partial solution at 
level i, until it satisfies the testable constraints. 

• For each could-be solution, check exhaustively (or by use of a random search) all its descendants at the bottom 
of the tree (level fi) for the presence of a possible solution. 

This is clearly not a sophisticated algorithm. It amounts to nesting the search for a successful descendant at level /i 
into the search for a could-be at level i. Nevertheless, it does exploit the problem structure by using the knowledge 
gleaned from the search at level i to focus the search at level /i. By finding a quantum analog of this algorithm (cf. 



Sec. [V), we will, therefore, be able to address the impact of problem structure on quantum search. 

Let us estimate the expected cost of running this algorithm. This cost consists essentially of three components: n, 
the cost of finding a consistent partial solution (a could-be) at level i in the tree, m, the cost of the subsequent search 
among its descendants at level /i, and r, the number of repetitions of this whole procedure before finding a solution. 
The search space for partial solutions (assignment of the primary variables A) is of size = 6\ Assuming that there 
are tia could-be solutions at level i (i.e., partial solutions that can lead to a solution), the probability of finding one 
of them by using a random search is thus riA/dA- Thus, one needs of the order of 

n = dA/riA (3) 

iterations to find one could-be solution. The descendants of a could-be are obtained by assigning a value to the subset 
of secondary variables B, of size ds = fc''^* (each could-be has ds descendants). Thus, searching through the entire 
space of descendants of a could-be requires on average 

m^dB (4) 

iterations. If the problem admits a single solution, this whole procedure needs to be repeated ua times, on average, 
since we have tia could-be solutions. More generally, if the number of solutions of the problem is given by uab^ this 
procedure must only be repeated 

r = riA/riAB (5) 

times in order to find a solution with a probability of order 1. Thus, the total number of iterations required to find a 
solution of an average instance is approximately equal to 

ic — r(n + m) = (b) 

nAB 

This corresponds to an improvement over a naive unstructured search algorithm. Indeed, the cost of a naive algorithm 
that does not exploit structure is simply dAB/^AB, where dAB = c^ac^b = b'^ is the dimension of the total search 
space. 
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The first term in the numerator of Eq. (||) corresponds to the search for could-be solutions in a space of partial 
solutions of size (Ia (shaded area at level i in Fig. |l|), while the second term corresponds to the search for actual 
solutions among all the descendants of the ua could-be solutions, each of them having ds descendants (shaded area 
at level /x in Fi g. [l| ). The denominator in Eq. (^ accounts for a problem admitting more than one solution. We 
will see in Sec. |[V| that the quantum counterpart of Eq. (^ involves taking the square root of n, m, and r, which 
essentially results in quantum-mechanical square-root speedup over this classical algorithm. 

To make the estimate of this classical average-case complexity more quantitative, let p{i) be the probability that a 
partial solution at level i is "good" (i.e., that it satisfies all the testable constraints). In Appendix we provide an 
asymptotic estimate of p{i) for an average instance of a large problem (/i oo) with a fixed value of the parameter 
/3. Recall that, if we want to preserve the difficulty while considering the limit of large problems, /3 must be kept 
constant. This is necessary for the complexity measure that we consider in this paper, as mentioned before. Thus, 
by making use of this asymptotic estimate oip{i), we can approximate the expected number of could-be solutions at 
the ith level, ua = p{i)V' , and the expected number of solution at the bottom of the tree, nAB = p{fJ-)b^- Therefore, 
the average search time of the classical algorithm to find the first solution is approximately equal to 

y +p(.)b^ 

This is essentially the cost for finding one solution (which basically requires checking all the partial solutions for a 
could-be, and subsequently checking the descendants of all these could-be solutions) divided by the expected number 
of solutions. [ 

Equation ( nj yields an approximate cost measure for our classical nested search algorithm as a function of the level 
of the "cut", i. An important question now is where to cut the search tree? If one cuts the tree too high (searching 
for could-be solutions at small i), one is unlikely to learn anything useful as most partial solutions will probably be 
"goods" , allowing for little discrimination between solutions and non-solutions. In other words, the second term in 
the numerator of Eq. (|^) dominates since p{i) is close to 1, i.e., there are many could-be solutions at level i. Searching 
for could-be solutions is thus fast (the space of primary variables is of size 6* only), but those partial solutions are of 
little use for singling out the actual solutions. The cost of the search among the descendants of those partial solutions 
is then high. Conversely, if one cuts the tree too deep (searching for could-be solutions at large i), although this 
would enhance discrimination between solutions and non-solutions, the search space for the primary variables would 
be almost as large as the entire space. Then, the first term dominates the scaling as the search for could-be solutions 
becomes time-consuming. It is therefore apparent that, for a typical problem instance, there ought to be an optimal 
level at which to cut. 

We can estimate the optimal level by finding the value of i that minimizes the classical computation time Tc{i) for 
a given value of /j,, b, ^, and k, using the functional form for p{i). This is done in Appendix where we estimate 
the asymptotic behavior of the location of the optimal cut level as a function of /?, as larger problems are considered 
{fj, oo). We then calculate the corresponding asymptotic scaling of Tc for large problems. The result is that the 
computation cost of running the classical nested search algorithm scales as 

Tc ~ 5"^ (8) 

for a search space of dimension d = b^^ where a < 1 is a constant depending on the problem considered. (More 
generally, this constant also depends on the number of nesting levels, but we have considered a single level of nesting in 



this Section.) As we will see, the structured quantum search algorithm that we present in Sect. IV has a computational 
cost of order of Vfo^, in agreement with the idea that a square root speedup is the best that can be achieved by 
quantum mechanics. The focus of this paper, however, is to show explicitly how a quantum algorithm can be 
implemented that reaches this maximum speedup over the classical algorithm discussed above. Interestingly enough, 
the quantum complexity of our nested algorithm scales then as a power of the dimension of the search space d = 
that is less than 1/2. Structured quantum search therefore offers a significant speedup over both structured classical 
search and unstructured quantum search. 



■^The denominator of Eq. (Q) is the number of solutions at the bottom of the tree. For a problem of maximum difficulty 
{P = Pc), it is shown in Appendix^ that p(/i) = b~'^, i.e., the problem admits a single solution on average. 
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III. UNSTRUCTURED QUANTUM SEARCH 



Let us first review the standard unstructured quantum searcli algorithm . Consider a Hilbert space of dimension 
d in which each basis \x) state {x = 1, • • - d) corresponds to a candidate solution of a search problem. Any search 
problem can be recast as the problem of finding the value(s) of x at which an "oracle" function f{x) is equal to one 
(this function being zero elsewhere). We start the quantum search process from an arbitrary basis state |s), and the 
goal is to reach a solution (or target) basis state \t), with f{t) = 1, in a shortest computation time. More precisely, 
if there is a single solution (or target state), the goal is to reach a state that has an amplitude of order 1 in \t), so 
that a measurement of this state gives the solution with probability of order 1. (If there are r solutions, the goal is 
to reach a superposition of the states |t), each with an amplitude of order r~^/^.) 

The quantum search algorithm we discuss below is in fact an immediate extension of the original one , where 
an arbitrary unitary transformation is used instead of the Walsh-Hadamard transformation ]l5[ |. Assume that we 
have at our disposal a quantum circuit that performs a particular unitary operation U . If this operation connects 
the starting state \s) to the target state \t), i.e., {t\U\s) ^ 0, then this operation can be used classically to find the 
target. Indeed, if we measure the system after applying U, the probability of obtaining the solution \t) is obviously 
|(t|C/|s)p. Thus, on average, we need to repeat this experiment |(t|J7|s)|^^ times to find the solution with probability 
of order 1. We will show now that, using a quantum algorithm, it is possible to reach the target state \t) in a number 
of steps of order |(t|[/|s)|~^ only, which represents a huge speedup provided that |(i|C/|s)| <C 1 (this corresponds to 
the situation of interest where the search space is very large). 

The idea behind a quantum search algorithm is to postpone the measurement, and keep a superposition of quantum 
states throughout the algorithm. Only at the end, a measurement is performed. Let us define the unitary operation 

Q - -UhUUt - -Ue^^'P^ e^^P* (9) 

where Pg = \s){s\ and Pt = \t){t\ are projection operators on \s) and |i), respectively. The two unitary operators 
Is = 1 — 2Ps and /t = 1 — 2Pt perform a controUed-phase operation: applying Is (or It) on a state \x) flips its phase 
if a; = s (or x — t), and leaves it unchanged otherwise. Note that the target state \t) is of course not available (it 
is what we are searching for). Instead, we have at our disposal the quantum circuit (or "oracle") that computes the 
function f{x), and we can use it to implement the circuit for It- Thus, we have It\x) — (— 1)-'^^^-' |a;) for all state \x). 
The circuit for Ig does not require the function ,f{x) and is trivial. The principle at the heart of quantum search is 
to apply the operation Q repeatedly in order to amplify the target component \t), starting from U\s). This quantum 
amplitude amplification pl[ can be understood by noting that, after applying U to the starting state |s), the repeated 
applications of Q essentially rotate this state into the target state \t) at an angular velocity that is linear in the 
number of iterations. More speciflcally, using Q = —1 + 2|<)(t| + 2U\s){s\U'^ — AU\s) {s\U^t) {t\, we can see that Q 
preserves the two-dimensional subspace spanned by U\s) and |t), namely 

C/|.)\ /l-4|(<|C/|.)p 2{t\U\s) \ (U\s)\ 
\t) )-\ -2{t\U\sY 1 ) \ \t) ) ^'"^ 

Therefore, in the case where |(t|?7|s)| ^ 1, the states U\s) and \t) are almost orthogonal, and Q tends to a rotation 
matrix of angle 2|(t|J7|s)| <C 1. Indeed, keeping only the first-order terms in m = (t|J7|s), we obtain 

U\s) \ ^( I 2u\ ( U\s) 
\t) ) - \ -2u* I ) \ \t) 

f 2u\ ( U\s) \ 

We can then easily approximate the operation of Q" in the subspace spanned by U\s) and \t): 

\ \i) -^\-2nu* \ \t) 



cos(27i|u|) |^sin(2n|u|) . . ^|^^ 



■P-rsin(2n|u|) cos(2n|u|) I V I*) 



(12) 



implying that the amplitude of the target state \t) after n iterations is 
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(i|Q"t/|s) ~ ucos(2n|u|) + ^sin(2n|u|) (13) 

\u\ 

These last expressions are only asymptotically valid, at the limit of small \u\. The exact expressions for Eqs. ( p^ ) and 
( p^ ) in terms of Chebyshev polynomials can be found in Appendix |C| 

Consider first the case of a small rotation angle. From Eq. (p3[), we see that if we iterate the application of Q on 
U\s), the amplitude of \t) grows linearly with the number of iterations n provided that the total angle 2n\u\ <^ 1: 

(i|Q"[/|s) ~ (l + 2n) {t\U\s) (14) 

Consequently, if we measure the system after n iterations, the probability p{n) of finding the solution grows quadrat- 
ically with n, as p{n) ~ n^|(i|/7|s)p. This is a great improvement compared to the linear scaling of the classical 
algorithm consisting in repeating n times the measurement of U\s), namely p{n) ^ n\{t\U\s)\'^ . This is the quadratic 
amplification effect provided by quantum mechanics. 

Now, consider the goal of reaching the target state \t) using this operator Q. From Eq. ( p^ we see that, starting 
from the state U\s), we need to apply Q until we have rotated it by an angle of about 7r/2 in order to reach \t). At 
this time only, one measures the system and gets the desired solution with a probability of order 1. The number of 
iterations required to rotate U\s) into the solution \t) is thus 

n^^\{t\U\s)\-' (15) 

and scales as the square root of the classical time. It is worth noting that the amplitude of any state |a;) orthogonal 
to the target |t) is given by 

(a;|g"C/|s) ~ cos{2n\u\) {x\U\s) (16) 

so that {x\Q"U\s) ~ (a::|[/|s) for small angles. Thus, the amplitude of non-solutions is not amplified by applying Q 
repeatedly, so that the quantum search algorithm selectively amplifies the solutions only. 

Thus, we have described here a general technique for achieving a quantum-mechanical square-root speedup of a 
search algorithm relying on any unitary transformation U [p5| . The quantum search algorithm can be simply viewed 
as a rotation from U\s) to \t) based on the repeated operation of Q, followed by a measurement. In the above 
discussion, the search operator U can be arbitrary, provided it connects \s) and \t). In the case of an unstructured 
search problem, as we have no a priori knowledge about where the solution is located, the most natural choice for U 
is the Walsh-Hadamard transformation H 

where x-y — J2t=o ^iVii^'^^ 2), with Xi (yi) being the binary digits of x (y).|^ Indeed, U = H does not bias the search 
towards a particular candidate solution since H\s) has the same (squared) amplitude in all the candidate solutions, 
so that the search starts from a uniform distribution of all states. Applying U = iJ to an arbitrary state |s), we see 
that 

{t\H\s) = ±1/Vd (18) 

for all possible target state \t). Thus, according to Eq. ([l5|), the number of iterations in the quantum search algorithm 
relying on H is 0{\fd) [^[^], whereas a classical search algorithm obviously requires 0{d) steps. When there are 
multiple target states (the problem admits several solutions), it can be shown that the quantum computation time 
becomes 0{^Jd/r), where r is the number of solutions |l^. The classical counterpart is then simply 0{d/r). 

For a structured search problem, however, it is natural to use the knowledge of the structure in order to choose a 
better U . Indeed, if we have partial knowledge about where the solutions are, we can exploit it to bias the search in 
such a way that U\s) has larger amplitudes in states which are more probable to be solutions. This is the focus of 
the present paper. It has been shown recently that an arbitrary (non-uniform) initial amplitude distribution can be 



^Here and below, we assume that d is a power of 2 for simplicity. 
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used as well with the standard quantum search algorithm, resulting in a 0{^d/r) quantum computation time [ p2| . 
This seems to indicate that the scaling remains in 0{^fd) even if we use our knowledge about the problem by biasing 
the initial distribution. In contrast, we will show in Sec. IV that the use of a nested quantum search algorithm 
can result in a power law in d with an exponent that is smaller than 1/2. The key idea is that U is not fixed a 
priori, but is rather obtained "dynamically" by the quantum algorithm itself, depending on the particular instance. 
In short, the standard search algorithm is used to construct an effective search operator U (or a non-uniform initial 
distribution) which, itself, is nested within another quantum search algorithm. In other words, we apply quantum 
search "recursively": the operator {—HIsHIt)^H resulting from the nested search algorithm based on H is used as a 
better search operator U for a quantum search at an upper level of hierarchy. 



IV. NESTED QUANTUM SEARCH ON STRUCTURED PROBLEMS 



A. The core quantum algorithm 



Assume that the Hilbert space of our search problem is the tensor product of two Hilbert spaces T-La and T-Lb ■ As 
before, A denotes the set of primary variables, that is, the variables to which we assign a value in the first stage. 
The partial solutions correspond to definite values for these variables. Thus, TLa represents the search space for 
partial solutions (of dimension d^i). The set of secondary variables, characterizing the extensions of partial solutions, 
is denoted by B, and the corresponding Hilbert space T-Lb is of dimension ds. Let us briefly describe the quantum 
algorithm with a single nesting level (the counterpart of the classical algorithm of Sect. 

• The first stage (i) consists in constructing a superposition (with equal amplitudes) of all the could-be solutions 
at level i by use of the standard unstructured search algorithm based on H . 

• Then (ii), one performs a subsequent quantum search in the subspace of the descendants of all the could-be 
partial solutions, simultaneously. This second stage is achieved by using the standard quantum search algorithm 
with, as an input, the superposition of could-be solutions resulting from the first stage. The overall yield of 
stages (i) and (ii) is a superposition of all states where the solutions have been partially amplified with respect 
to non-solutions. 

• The final procedure (iii) consists of nesting stages (i) and (ii) — using them as a search operator U — inside a 
higher-level quantum search algorithm until the solutions get maximally amplified, at which point a measurement 
is performed. This is summarized in Fig. 0. 



FIG. 2. Schematic representation of stages (i) and (ii) of the quantum algorithm. These stages partially amplify the solution 
states, and can be nested into a standard quantum search algorithm (iii) in order to speedup the amplification of the solutions. 




Let us now follow in more details the evolution of the quantum state by applying this quantum nested algorithm, 
and estimate the number of iterations required. The starting state of the search is denoted as |s, s'), where \s) (lying 
in "Ha) and \s') (lying in T-Lb) are just the initial state of two different parts of the same, single, quantum register 
which is large enough to hold all the potential solutions in the total search space (i.e.. all the 6'^ leaf nodes of the 
search tree at level ^). Register A stores the starting state at an intermediate level i in the tree, while register B 
stores the continuation of that state at level /i. In other words, A holds partial solutions and B their elaboration in 
the leaves of the tree. 



(i) The first stage of the algorithm consist in a standard quantum search for could-be partial solutions |c) at level i, 
that is, states in subspace Ha that do not violate any (testable) constraint. We start from state \s) in subspace Ha, 
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and apply a quantum search based on the Walsh-Hadamard transformation H since we do not have a priori knowledge 
about the location of could-be solutions. Using 



(c\H\s) =±l/^dA (19) 

we can perform an amplification of the components |c) based on Q = —HlgHIc where 

Is=exp{i7T\s){s\) (20) 
=exp(z^^|c)(c|) (21) 

The states |c) correspond to the could-be partial solutions in Ha (assignment of the primary variables that could lead 
to a solution), and belong to the subset C = {ci, • • • , c„^}. We assume that there are ha could-be partial solutions, 
with 1 <^ riA <C dA- The quadratic amplification of these could-be solutions, starting from |s), is reflected by 



{c\Q''H\s) ~ n {c\H\s) ~ n/^/dA (22) 

for small rotation angle. Thus, applying Q sequentially, we can construct a superposition of all the could-be solutions 
|c), each with an amplitude of order ~ 1/ y/riA- The required number of iterations of Q scales as 



n ~ ^JdAjriA (23) 

This amplitude amplification process can equivalently be described in the joint Hilbert space Ha ®'Hb-, starting from 
the product state |s, s'), where |s') denotes an arbitrary starting state in Tis, and applying (Q ® 1) sequentially: 

(c, s'KQ ® ® l)|s, s') = (c|g"iJ|s) - n/v/dl (24) 

Here and below, we use the convention that the left (right) term in a tensor product refers to subspace A (B). 

(ii) The second stage of the algorithm is a standard quantum search for the secondary variables B in the subspace 
of the "descendants" of the could-be solutions that have been singled out in stage (i). As before, we can use the search 
operator H that connects extended could-be solutions |c, s') to the actual solutions or target states \t, t') in the joint 
Hilbert space: 

{t,t'\{t®H)\c,s') = {t\c) {t'\H\s') = ±5c,i/V^ (25) 

Note that, this matrix element is non- vanishing only for could-be states |c) that lead to an actual solution. Define 
the operator R = —(1 (g) HIsiH)It, with 

=exp(i7r|s')(s'|) (26) 

It =exp(i7r ^ \t,t'){t,t'\) (27) 
(t,t')eT 

where T is the set of solutions \t,t') at the bottom of the tree, and #(T) = habi i-e., the problem admits uab 
solutions. We can apply the operator R sequentially in order to amplify a target state |f, t'), namely 

(t,t'|(l®iJ)|c,s') ifc^i (2^^ 

for small rotation angle. Note that, for a could-be state |c) that does not lead to a solution (c ^ t), we have 
It\c,x) = \c,x) for all so that 7?™(1 (g iJ)|c, s') = (-1 (g) 7?/^ F)'"(l (g) 7J)|c, s') = (1 (g iJ)|c, s'), and the matrix 
element is not amplified by m compared to the case c — t. In other words, no amplification occurs in the space of 
descendants of could-be partial solutions that do not lead to an actual solution. Thus, Eq. ( p8| ) results in 

777 

{t,t'\R"^{l®H)\c,s')^^5^^t (29) 

VdB 



Assuming that, among the descendants of each could-be solution |c, s'), there is either zero or one solution, we need 
to iterate R of the order of 
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times in order to maximally amplify each solution. We then obtain a superposition of the solution states \t,t'), each 
with an amplitude l/y/uA- This can also be seen by combining Eqs. ( [2^ ) and (|2^), and using the resolution of 
identity 1 = J2x,y \x:y){x:y\- 

{t, t'\ H){Q ® 1) \s, s') = ^(t, ® H)\x, y) {x, y\{Q ® IL)"(i? l)|s, s') 



(t, ® s') (t, s'KQ (g) (g) l)|s, s') 

{m/^/d^){n/\/d^) 



(31) 



Thus, applying the operator Q" followed by the operator i?™ connects the starting state |s, s') to each of the solutions 
\t,t') of the problem with a matrix element of order ~ l/y/uA- 



(iii) The third stage consists in using the operator U = R"^{1 ®H){Q® ]l)"(i/ (g) 1) resulting from steps (i) and (ii) 
as a search operator for a higher-level quantum search algorithm, in order to further amplify the superposition of 
UAB target (or solution) states \t,t'). The goal is thus to construct such a superposition where each solution has an 
amplitude of order ^ 1/y/nAB- As before, we can make use of the operator S — —U{Is <E) Is')U'^It where Is, Is', and 
It are defined in Eqs. (pO|), (26), and (p7|), in order to perform amplification according to the relation 



{t,t'\S''U\s,s') ~ r {t,t'\U\s,s') ~ r/V^ 



(32) 



for small rotation angle. The number of iterations of S required to maximally amplify the solutions is thus of the 
order of 



riA 
nAB 



(33) 



This completes the algorithm. At this point, it is sufficient to perform a measurement of the amplified superposition 
of solutions. This yields one solution \t,t') with a probability of order 1. 

FIG. 3. Circuit implementing the nested quantum search algorithm (with a single level of nesting). The upper set of quantum 
variables, initially in state |s), corresponds to the primary variables A. The lower set of quantum variables, initially in states 
|s'), is associated with the secondary variables B. The quantum circuit makes use of controUed-phase gates Is = exp(i7r|s) {s|). 
Is' ~ exp(i7r|s'){s'|), 7c = exp(i7r^^g^ |c){c|), and It = exp{in'^^^ ^,^^rp\t,t'){t,t'\), and Walsh-Hadamard gates H. The 

entire operation of U (exhibited inside the dashed box) is repeated r times. Note that = U'' corresponds to same the 
circuit as U but read from right to left. 
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In Fig. ^, the quantum network that implements this nested quantum search algorithm is illustrated. Clearly, a 
sequence of two quantum search circuits (a search in the A space followed by a search in the B space) is nested 
into a global search circuit in the whole Hilbert space TLab- This can be interpreted as a "dynamical" choice of the 
search operator U that is used in the global quantum search. This quantum nesting is distinct from a procedure 
where one would try to choose an optimum U before running the quantum search by making use of the structure 
classically (making several classical queries to the oracle) in order to speedup the resulting quantum search. Here, no 
measurement is involved and structure is used at the quantum level. 
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B. Quantum average-case complexity 



Let us estimate the total number of iterations, or more precisely the number of times that a controUed-phase 
operator (/(, which flips the phase of a solution, or /c, which flips the phase of a could-be partial solution) is used. 
Since we need to repeat r times the operation S, which itself requires applying n times Q and m times R, we obtain 
for the quantum computation time 



T„ ~ rfn + to) ~ ; (34) 

y/nAB 

This expression is the quantum counterpart of Eq. (^, and has the following interpretation. The first term in the 
numerator corresponds to a quantum search for the could-be partial solutions in space of size cIa- The second term is 
associated with a quantum search of actual solutions in the space of all the descendants of the ua could-be solutions 
(each of them has a subspace of descendants of size ds). The denominator accounts for the fact that the total number 
of iterations decreases with the square root of the number of solutions of the problem uab i in the standard quantum 
search algorithm. 

Let us now estimate the scaling of the computation time required by this quantum nested algorithm for a large 
search space {fi oo). Remember that fi is the number of variables (number of nodes for the graph coloring problem) 
and b is the number of values (colors) per variable. As before, if we "cut" the tree at level i (i.e., assigning a value 
to i variables out of n defines a partial solution), we have dA = V and ds = Also, we have ha = p{i)b^, and 

nAB = p{fJ-)b'^, where p{i) is the probability of having a partial solution at level i that is "good" in a tree of height 
fi. (The quantity p{p) is thus the probability of having a solution in the total search space.) We can reexpress the 
computation time as a function of i, 

which is the quantum counterpart of Eq. (|^). In order to determine the scaling of Tg, we use the asymptotic estimate 
of p{i) that is derived in Appendix namely 

/3\ ( i'^^ 



p(i) - b ^ \^'J (36) 

Eq. ( ^6| ) is a good approximation of p{i) in the asymptotic regime, i.e., when the dimension of the problem /i (or the 
number of variables) tends to infinity. Remember that, in order keep the difficulty constant when increasing the size 
of the problem, we need to choose the number of constraints ^ = when /i — > oo.Q The constant /3 corresponds 
to the average number of constraints per variable, and is a measure of the difficulty of the problem. The difficulty 
is maximum when f3 is close to a critical value (3c — b''\og{b), where k is the size of the constraint (i.e., number of 
variables involved in a constraint). Note that p(/i) = fo~A'(/3//3c)^ implying that the number of solutions at the bottom 
of the tree is n{fj,) — fe^^^^'^Z'^'^). Thus, if /? ~ /3c, we have p{ii) ~ fo^'', so that the problem admits of the order of 
n(/i) ~ 1 solutions. This corresponds indeed to the hardest case, where one is searching for a single solution in the 
entire search space. When /3 < /3c, however, there are less constraints and the problem admits more than one solution, 
on average. If /3 > /3c, the problem is overconstrained, and it typically becomes easier to check the nonexistence of a 
solution. 

Now, plugging Eq. ( p6| ) into Eq. (p5|), we obtain for the quantum computation time 

^ + \Jbf^- l^^P/Pc){i/lif 



^ V . (37) 



Defining the reduced level on the tree as a; = i.e., the fraction of the height of the tree at which we exploit the 
structure of the problem, we have 



*For the graph coloring problem, since f = e6 (where e being the number of edges and b the number of colors), it implies 
that the number of edges must grow linearly with the number of nodes for a fixed number of colors in order to preserve the 
difficulty. In other words, the average connectivity must remain constant. 
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„i + <,i-(WAK 

where a = \/\^ . Now, we want to find the value of x that minimizes the computation time Tq{x), so we have to solve 

iP/(3c) kx''-^ = a(/3//3c)-^+-i (39) 

For large fi (or large a), this equation asymptotically reduces to 

(/3//3c) x'' +x-l = (40) 

The solution x (with < x < 1) corresponds therefore to the reduced level for which Tq{x) grows asymptotically 
(/i oo) with the smallest power in h. Note that this optimum x is such that both terms in the numerator of Eq. ( |3^ ) 
grow with the same power in h (for large This reflects that there is a particular fraction x of the height of the tree 
where it is optimal to "cut", i.e., to look at partial solutions. The optimum computation time can then be written as 

T ^ ^ (41) 



a 



where the constant a < 1 is defined as the solutio n x o f Eq. (^0|)P| Note that, for a search with several levels of 



nesting, the constant a <x, as we shall see in Sect. IV C. 

Equation ( ^l| ) implies that the scaling of the quantum search in a space of dimension d = h^ is essentially 0{d°'/^) 
modulo the denominator (which simply accounts for the number of solutions). In contrast, the standard unstructured 
quantum search algorithm applied to this problem corresponds to a = a; = 1, with a computation time scaling as 
r^(a = 1) = 0(di/2). This means that exploiting the structure in the quantum algorithm results in a decrease of 
the power in 6 by a coefficient a: the power 1/2 of the standard quantum search is reduced to a/2 for this nested 
quantum search algorithm. Consider this result at /3 = j3c, i.e., when the difficulty of the problem is maximum for a 
given size /.t. This is the most interesting case since when /? < /3c, the problem becomes easier to solve classically. For 
f3 = Pc, the nested algorithm essentially scales as 

Tq ~ = Vb^ (42) 

where a = x < 1 with x being the solution of x'^ + x — 1 = 0, and d = is the dimension of the search space. 
This represents a significant improvement over the scaling of the unstructured quantum search algorithm, 0{d^^'^). 
Nevertheless, it must be emphasized that the speedup with respect to the computation time 0(c?") of the classical 
nested algorithm presented in Section ^ is exactly a square root (cf . Appendix ^) . This implies that this nested 
quantum search algorithm is the optimum quantum version of this particular classical non-deterministic algorithm. 

For the graph coloring problem (k — 2), we must solve the linear equation of second order x'^ + x — 1 ~ 0, whose 
solution is simply x = (—1 + V5)/2 = 0.6180. (When fc > 2, the solution for x increases, and tends to 1 for large k.) 
This means that the level on the tree where it is optimal to use the structure is at about 62% of the total height of 
the tree, i.e., when assigning values to about 62% of the /i variables. In this case, the computation time of the nested 
algorithm scales as 0{d'^^^^), which is clearly an important computational gain compared to 0(d°-^). 

Consider the regime where /3 < /3c, i.e., there are fewer constraints and therefore more than one solution on average, 
so that the problem becomes easier to solve. For a given fc, the solution x of Eq. (^ ) increases when /3 decreases, and 
tends asymptotically to 1 for /3 — > 0. This means that we recover the unstructured quantum search algorithm in the 
limit where P —> 0. The denominator in Eq. (^) increases, and it is easy to check that the computation time 



decreases when (3 decreases. As expected, the computation time of the nested algorithm approaches 0{vdF/i^) as (3 
tends to (or x 1), that is, it reduces to the time of the standard unstructured quantum search algorithm at the 
limit /3 ^ 0. 



^We may ignore the prefactor 2 as it only yields an additive constant in the logarithm of the computation time. 
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C. Quantum search with several levels of nesting 



The quantum algorithm described m Sect. IV A rehes on a single level of nestmg. Indeed, the search at the bottom 
of the tree (level n) is speeded up by making use of a search at level i which determines the partial solutions which 
are "good" . Only the candidate solutions which are descendants of these partial solutions are examined in the search 
at level /i. It should be realized that these "good" partial solutions at level i are selected, themselves, by a naive 
search: stage (i) indeed amounts to use the standard unstructured search based on H. In the corresponding classical 
nested algorithm, this amounts to select a random partial solution at level i and check whether it is good. 

It is natural that both the classical and the quantum algorithms could be improved further if the search for good 
partial solutions at level i itself was made faster by making use of the structure of the upper part of the tree (by 
examining partial solutions at level j, with j < i, and considering only the descendants of the "good" ones). This 
leads to the notion of a search with several levels of nesting (i.e., a nesting depth larger than one). 

In order to analyze the scaling achieved by several levels of nesting, let us consider a search at level i which 
corresponds to the n-th nesting level. We suppose that this search rehes itself on a search at level j, where j < i < ^, 
which corresponds therefore to the n + 1-th nesting level. Let i = XnfJ, and j — a;„+i/i, where Xn and Xn+i denote the 
reduced level on the tree at the n-th and n + 1-th nesting level, respectively. Assume that the quantum computation 
cost at level j is given by 



where a„+i is the scaling coefficient at the n + 1-th level of nesting (level j in the tree). Using the structure at level 
j, the quantum computation cost at level i can be written as 

VpUW (t{j) + 

m ^ ^ 



VpUW 



-I- VpUW 



(45) 



VpiW 

By optimizing j so that t{i) is minimum, as before, we obtain j = Xn+i^, where Xn+i is a solution of 

/ (3c) x'^+i + an+i X„+i - Xn = (46) 
with < Xn+i < 1- Defining the scaling coefficient a„ by 

UnXn = an+lXn+1 (47) 

we see that the corresponding computation cost at level i is given by 



Thus, to determine the cost of the global algorithm, we need to solve the set of recurrence equations (|46|)-( 47) for 



n = 0, 1, • • • , TV — 1, where N is the nesting depth {N = 1 corresponds to the algorithm described in Sect. IV A ). The 
boundary conditions are xq = 1 (the upper level is a search for solutions at the bottom of the tree, i.e., at level fi) and 
Q!iv = 1 (the innermost search at the A^-th level of nesting is supposed to be a naive search). These two conditions, 
together with the 2N recurrence relations, uniquely determine the variables (xq, xi, ■ ■ ■ xn) and (ao, ai, ■ • • , a^)- The 
overall scaling of the quantum search algorithm is 0{-\/b^^), i.e., it is governed by ao (the constant that was denoted 
as a in the previous Sections) . Note that this entire calculation is also valid for a classical nested search with several 
levels of nesting, except for the square root. Thus, the speedup of the multi-nested quantum search algorithm remains 
a square root if compared with the corresponding multi-nested classical search algorithm. 

We show in Table | the values of the x„'s and a„'s for an average instance of maximum difficulty (/3 = f3c) of the 
graph coloring problem (fc = 2). The scaling coefficient decreases with an increasing nesting depth A^, implying 
that the speedup over an unstructured search improves by adding further nesting levels. It should be emphasized, 
however, that the formalism used to estimate the scaling throughout this paper cannot be used for a large nesting 
depth A^. Indeed, the derivation of p(i) essentially neglects the correlations between partial solutions at any level in 
the tree which arise because of their sharing a same ancestor. Thus, our cost estimate for the multi-nested algorithm 
is only valid provided that N <^ n (the fact that qq — > when A^ ^ oo is meaningless) . 
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V. CONCLUSION 



There is considerable interest in the possibihty of using qnantnm computers to speedup the solution of NP-complete 
problems given the importance of these problems in complexity theory and their ubiquity amongst practical compu- 
tational applications. This paper presents an attempt in this direction by showing that nesting the standard quantum 
search algorithm results in a faster quantum algorithm for structured search problems such as the constraint satis- 
faction problem than heretofore known. The key innovation is to cast the construction of solutions of the problem 
as a quantum search through a tree of partial solutions, which narrows a subsequent quantum search at the next 
level in the search tree. The corresponding computation time scales exponentially, but with a reduced coefficient that 
depends on the number of nesting levels and on the problem. The spciodup that is achic;ved is a square root over the 
computation time of a corresponding classical nested search algorithm, which represents therefore the appropriate 
benchmark. Nevertheless, it is an exponential improvement with respect to the time needed to solve the problem by 
use of the standard unstructured quantum search algorithm. 
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N 


Xo 


ao 


Xl 




X2 


a2 


X3 


as 


1 


1.000 


0.618 


0.618 


1.000 








2 


1.000 


0.484 


0.718 


0.674 


0.484 


1.000 






3 


1.000 


0.416 


0.764 


0.545 


0.590 


0.706 


0.416 


1.000 



TABLE L Reduced level x„ on the tree and corresponding scaling coefHcient a„ at the n-th level of nesting for the graph 
coloring problem (fc = 2) at /3 = /3c. The variable N denotes the nesting depth, and ao governs the scaling of the overall 
quantum (or classical) algorithm. 
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APPENDIX A: ASYMPTOTIC PROBABILITY OF A NODE IN A SEARCH TREE TO BE GOOD 



Let us derive an approximate functional form for p{i), the probability that a node at level i in the search tree is 
"good". The derivation is complicated by the fact that the same problem instance can be easy or hard depending 
on the order in which the variables are assigned values. This is because it is possible that the constraints are such 
that a particular variable can only take one possible value. If this variable is examined early in the search process, 
the recognition that the value is highly constrained would permit a large fraction of the search space to be avoided. 
Conversely, if this variable is examined late in the search process, much of the tree might already have been developed, 
resulting in relatively little gain. However, the algorithm described in Sec. || is a naive algorithm that does not optimize 
the order in which the variables are assigned values. Thus, we can compute the probability p{i) for an average tree 
having a random variable ordering. 

The simplest way to do this is to consider a lattice of partial solutions rather than a tree of partial solutions, because 
a lattice of partial solutions effectively encodes all possible variable orderings. In particular, the ith level of a lattice 
of partial solutions represents all possible subsets of i variables out of /i variables, assigned values in all possible 
combinations. Thus, in a lattice there are nodes at level i rather than the 6* nodes in a tree. So each level of 

the lattice encodes the information contained in C^) different trees. As each constraint involves exactly k variables, 
and each variable can be assigned any one of its b allowed values, there are exactly b'' "ground instances" of each 
constraint. Moreover, as each constraint involves a different combination of k out of a possible /i variables, there 
can be at most (^) constraints. Each ground instance of a constraint may be "good" or "nogood" , so the number of 
ground instances that are "nogood", ^, must be such that < ^ < If ^ is small the problem typically has many 

solutions. If ^ is large the problem typically has few, or perhaps no, solutions. The exact placement of the ^ nogoods 
is, of course, important in determining the their ultimate pruning power. 

Thus to estimate p{i) in an average tree, we calculate the corresponding probability that a node in the lattice (which 
implicitly incorporates all trees) is "nogood", conditional on there being ^ "nogoods" at level k. For a node at level 
i of the lattice to be "good" it must not sit above any of the ^ "nogoods" at level k. A node at level i of the lattice 
sits above (^,) nodes at level k. Thus, out of a total possible pool of &'^(^) nodes at level fc, we must exclude (^) of 
them. However, we can pick the ^ nogoods from amongst the remaining nodes in any way whatsoever. Hence the 
probability that a node is "good" at level i, given that there are ^ "nogoods" at level k, is given by the ratio of the 
number of ways to pick the "nogoods" such that a particular node at level i is "good" , to the total number of ways 
of picking the ^ "nogoods" . As a consequence, the probability for a partial solution to be good at level i in a tree of 
height /X and branching ratio b can be approximated as 17 |T^j20[ | 



Pii) = " /^fc(.)x ' (Al) 

where k is the size of the constraint (i.e., number of variables involved in a constraint) and ^ is the number of "nogood" 
ground instances (or number of constraints) . This approximation essentially relies on the assumption that the partial 
solutions at a given level are uncorrelated. 

Now, we are interested in obtaining an asymptotic expression for p{i) for large problems, i.e., when the number of 
variables /i — > c». Recall that to scale a constraint satisfaction problem up, however, it is not sufficient to increase 
only fi. In addition, we ought also to increase the number of constraints so as to preserve the "constrainedness-per- 
variable", (3 — S,/ ^i. Thus, when we consider scaling our problems up, as we must do to assess the asymptotic behavior 
of the classical and quantum structured search algorithms, we have fi oo and scale ^ = keeping (3, b and k 
constant.^ We now make the assumption that ^ ^ b'^ik) ^^'^ C ^ ^'"(fc) ^ (it)' "^tiicli is justified in the asymptotic 
regime. Using Stirling formula, we have 



For graph coloring, this scaling assumption corresponds to adding more edges to the graph as we allow the number of nodes 
to go to infinity, while simultaneously keeping the average connectivity (number of edges per node) and the number of colors 
fixed. 
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M 



K 



(A2) 



for large M and N, provided that K ^ M, N. This allows us to reexpress Eq. (Al) as 



-k ik) 



p(z)= (1-5-M-) ) (A4) 



Now, assuming that k and fc ^ /i, and reusing Eq. (A2), we have 

for large i and /i. Finally, assuming for simplicity that 6*^ 3> 1 and ^ 1, we obtain 

(3\ fi"-'" 



p{i) V/5c/ (A5) 

where P = £,/lJ. measures the difficulty of the problem and /3c = b'^ log(6) is the critical value around which the problem 
is the most difficult. 

APPENDIX B: AVERAGE-CASE COMPLEXITY OF THE CLASSICAL SEARCH 

Plugging Eq. (A£) into Eq. (Q), we obtain an approximate expression of the classical computation time needed to 
solve an average instance with fixed (3 

+ !^M-m(/3//3c)(j7p)'= 

where the denominator is simply the expected number of solutions. Let us now find the level i where it is optimum 
to "cut" the tree. The value of i which minimizes T'c(i) corresponds, for large fi, to the situation where both terms 
in the numerator grow with the same power of b, i.e., the solution of the equation i — ^ — ^{P/l3c){'i/f^)''- Then, one 
can show that the computation time approximately scales as 

where the scaling coefficient a = x with x — i/fj,, the fraction of the height at which one cuts the tree, being the 
solution of Eq. ( ^o|) such that < a: < 1. For problems of maximum difficulty (/3 — /3c), i.e., problems which admit a 
single solution on average, the classical time scales thus as 

^^-^13^ = OK) (B3) 

for a search space of dimension d = b^ . This represents a significant improvement over a classical search that does 
not exploit the structure, i.e., Tc 0{d). 

APPENDIX C: EXACT EXPRESSION FOR THE ITERATED SEARCH OPERATOR IN TERMS OF 

CHEBYSHEV POLYNOMIALS 

The unstructured quantum search algorithm is based on iterating n times the operator 
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where u = {t\U\s) is a c-number (with |u| < 1). The iterated operator can be written exactly as 



0" = (-1)' 



U2n{\u\) 



C/2„-l(|u|) 



^U2n-li\u\) -U2n-2i\u\) 



(C2) 



where Un{cos9) = sin((?i+ 1)9) / sm{9) is the Chebyshev polynomial of the second kind. By making use of Uo{x) — 1, 
Ui{x) = 2x, and U2{x) — Ax^ — 1, it is easy to check that, for n = 1, Eq. (C2) 



U2{\U\) 



^Ui{\u\) 



Q 



is indeed consistent with Eq. ( |Cl| ). Now, using the recursion formula for Chebyshev polynomials, 

Un+l{x) - 2xUnix) + Un-lix) = 



we can verify easily that the product of Q and Q", as defined by Eq. (C2), yields Indeed, 

U2ni\u\) 



QQ^ = (-1) 



n+l 



4|u|2 - 1 -2u 
2u* -1 



-^C/2„-l(|«|) 
f4c/2„-l(|^/|) -C/2„-2(k|) 



C/2„+2(k|) -^{/2„+l(|u|) 



rC/2„+l(|u|) -U2n{\u\) 



= (-1)"+! 

We can use Eq. (|C2|) to calculate the exact amplitude of the target state \t) after n iterations, that is 



(<|Q"t/|s) = (-1)" uU2ni\u\) - -- U2n-li\u\) 

\u\ 



Equivalently, we can write 



{t\Q^U\s) = (-1)" uT2n{\u\) - ^ (1 - \U\') U2n-l{W\) 



by using the recursion formula 



T„ix) = Unix) ~ xUn-l{x) 



(C3) 



(C4) 



(C5) 



(C6) 



(C7) 



(C8) 



where T„(cos6') — cos{n9) is the Chebyshev polynomial of the first kind. Note that, at the limit of |u| <C 1, it is easy 
to show that T2„(|u|) ~ (— 1)" cos(2ri|u|) and U2n-i{\u\) ~ — (— 1)" sin(2n|w|), so that we obtain 



(t\Q'"U\s) ~ u cos(2n|u|) + — sin(2n|u|) 

\u\ 



(C9) 



in agreement with Eq. (|13|). Thus, the second term in Eq. (C9) mainly contributes to the amplitude of the target 
state \t) at the limit of small \u\. 
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